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DETAILED ACTION 

Response to Arguments 

1 . In view of the Appeal Brief filed on 8/5/2005, PROSECUTION IS HEREBY 
REOPENED. A new ground of rejection is set forth below. 

To avoid abandonment of the application, appellant must exercise one of the following 
two options: 

(1) file a reply under 37 CFR 1.111 (if this Office action is no n- final) or a reply under 37 
CFR 1.113 (if this Office action is final); or, 

(2) request reinstatement of the appeal. 

If reinstatement of the appeal is requested, such request must be accompanied by a 
supplemental appeal brief, but no new amendments, affidavits (37 CFR 1.130, 1.131 or 1.132) or 
other evidence are permitted. See 37 CFR 1.193(b)(2). 

2. In response to communications filed on 1 1/4/2004, applicant has cancelled claims 2, 24- 
32, 34, and 57 and amended claims 1, 8, 10, 13, 15, 16, 20, 33, 40-45, 47-53, 55-56, 63-65, 67- 
68, 70-76, and 78. The following claims 1, 3-23, 33, 35-56, and 58-78 are presented for 
examination. 

3. The amendments to the specification, pages 2-3, filed on 5/2/2005 have been considered 
and the objection has been withdrawn due to the amended specification. The Terminal 
Disclaimer fee has been received and the Double Patenting rejection has been withdrawn. 
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3,1 Applicant's arguments in the brief, filed on 8/5/2005 with respect to the rejection of 
claims 1, 3-23, 33, 35-56, and 58-78 have been fully considered but they are not persuasive. In 
the Summary of Claimed Subject Matter, pages 3-4 of the appeal brief, Applicant fails to provide 
a concise description of the specification to show the claimed limitations of claim 1 because the 
pages and line numbers cited by applicant do not describe the claimed invention as claimed. The 
amendment, which was filed on 1 1/4/2004 before the Final rejection constitutes new matter and 
a new ground of rejection of 1 12, paragraph 1 is necessitated by the amendment. Applicant 
argues that clear and particular evidence are not provided to support the combining of the 
references. Examiner would like to clarify that the independent claims are not rejected under 
England and additional clarification for combining of the references was provided to Applicant 
in the reply to Applicant's arguments mailed on 5/6/2005. Applicant is again provided with the 
clarification for combining of the references as explained below in the rejection of the claims. In 
response to Applicant's arguments of the claimed invention, not only that applicant's amended 
claims constitute new matter as explained in the 112 rejection below, applicant relies on 
language that is not claimed to provide the basis for his/her arguments. Applicant's argument is 
misleading, for instance, applicant's brief, page 8, uses "authentication of components" "of a 
camera in the middle of taking picture unplugged from a security core and plugged again to 
another security core" to explain the claimed limitation of improving the security of transactions 
(security sensitive operation) performed using smart cards, and also a card with an integrated 
biometric sensor. These facts are not relevant to the process claimed for example in claim 56 
with applicant's explanation above (see applicant's abstract and independent claims, emphasis 
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added). Applicant also adds, "the security core may conclude that a security sensitive operation 
with a component is not authentic if that component is disconnected and may treat data that is 
later received from the reconnected component as unsecure. Nothing in Bjorn discloses or 
suggests the teachings recited in claim 1 " This is clearly not the teaching of any of the 
independent claims. The limitation that applicant is referring to on the other hand says, 
concluding within a security component (security core) that a security sensitive operation 
(transaction) is authentic based on all the one or more other components (the biometric sensor) 
which are securely operably connected remaining securely operably connected until completion 
of the security-sensitive operation. Applicant on the reply filed on 5/2/2005, again relies on 
language that is not claimed to maintain his/her arguments, by referring to "all the one or more 
other components" as "components other that the biometric sensor", where the claim language, 
on the contrary, recites "operating a biometric sensor as one of the one or more other 
components to the security component". For at least the reasons stated above, Examiner 
maintains the rejection of the claims under 103 in view of the same references, independent 
claims remain rejected with some clarification; applicant's amendment necessitated new ground 
of rejection of new matter. 

Claim Rejections - 35 USC § 112 
4. The following is a quotation of the first paragraph of 35 U.S. C. 112: 

The specification shall contain a written description of the invention, and of the manner 
and process of making and using it, in such full, clear, concise, and exact terms as to enable any 
person skilled in the art to which it pertains, or with which it is most nearly connected, to make 
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and use the same and shall set forth the best mode contemplated by the inventor of carrying out 
his invention. 

4.1 Claims 1, 33, and 56 and the intervening claims are rejected under 35 U.S.C. 112, first 
paragraph, as failing to comply with the written description requirement. The claim contains 
subject matter, which was not described in the specification in such a way as to reasonably 
convey to one skilled in the relevant art that the inventor(s), at the time the application was filed, 
had possession of the claimed invention. Applicant's disclosure fails to recite 

a card reader for repeatedly accessing the stored secrets and stored identifying 
information wherein the stored identifying information comprises stored biometric information 
of the authorized holder and wherein the card reader is configured to repeatedly access the stored 
secrets and stored identifying information upon beginning a security-sensitive operation and is 
configured to terminate repeatedly accessing upon completion of the security-sensitive operation: 

means for establishing a secure operable connection between the biometric sensor, the 
card reader and the security component; means for comparing the repeatedly obtained biometric 
information to the stored biometric information of the authorized holder of the card; 

and means for concluding within the security component that the security-sensitive 
operation is authentic based on all the one or more other components which are securely 
operably connected to the security component remaining securely operably connected to the 
security component until completion of the security-sensitive operation. 

The citations provided by Applicant in the brief (page 10, line 11; page 32, line 17 to 
page 33, line 13 and figure 4) are nowhere close to the description of the claimed invention as 
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claimed above to reasonably convey to one skilled in the relevant art that the inventor(s), at the 
time the application was filed, had possession of the claimed invention. For example page 10, 
line 1 1, as cited by applicant, does not refer to a card reader for repeatedly accessing the stored 
secrets and stored identifying information; and page 32, line 17 to page 33, line 13 and figure 4 
do not discuss either page 32, line 17 to page 33, line 13 upon beginning a security-sensitive 
operation and is configured to terminate repeatedly accessing upon completion of the security- 
sensitive operation . 

In fact, the citation provided by applicant on page 32, line 17 to page 33, line 13 shows 
clearly that the card reader performs nothing else in applicant's disclosure except for 
authenticating itself to the security core (for secure attachment); "the user identifies himself to 
the biometric sensor, a validation may be performed either by the biometric sensor or the 
security core to compare biometric input to the information stored on the card". In this section, 
the disclosure is directed to whether the biometric sensor should be integrated with the smart 
card or not; a benefit from separating them is using multiple smart card/sensor combinations (fig. 
4); in the second approach to improving security with smart cards the smart card and biometric 
sensors may be physically combined onto a single card" (figures 5-6), page 33, lines 14-15. In 
the second approach, which is explained later in figures 5-7, "the smart card with its protected 
information is effectively the security core" (see page 34, lines 2-3). As illustrated in figure 
6,and page 34, lines 12-14, "the smart card attaches itself to the security core through the smart 
card reader", there is no further discussion of the smart card reader; in fact, "the sensor is 
capable of performing repeatedly checking the user's identity" the card is integrated with the 
biometric sensor so that "the biometric sensor can detect whether contact with the user has been 
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interrupted" (page 35, line 18 through page 36, line 9 and page 37, line 13-21). The "security- 
sensitive operation" is a transaction performed by an application to authenticate a user as defined 
on page 35, line 18 through page 36, line 9; by "detecting whether contact with the user has 
been interrupted; if the sensor detects an interruption the transaction is preferably aborted" (page 
37, lines 18-21). The written description does not provide any support of card reader being 
configured for repeatedly accessing... upon beginning a security-sensitive operation and 
configured to terminate repeatedly accessing... upon completion of security-sensitive operation 
neither means for comparing. . . . Regarding the "concluding that the security-sensitive operation 
is authentic", applicant's disclosure does not describe authenticity of the "security-sensitive 
operation" (transaction), the disclosure on the other hand, determines whether the transaction is 
successfully created based on interruption of contact with the authenticated user as mentioned on 
page 38, lines 8-15, the specification then suggests "it may also be desirable to include logic to 
check whether all of the authenticated components that were in use when performing the security 
sensitive operation - or perhaps all authenticated components that were plugged in when the 
transaction started- are still plugged in to their respective bus prior to determining that the 
security operation is successfully created", which means before determining that the security 
operation is successfully created check if the components are still plugged in, the checking may 
be done at anytime before the determining . There is no support of " concluding within the 
security component (security core)", as a matter of fact, the security core is not even a concern in 
this section, and there is no support of determining that the security operation is authentic , and no 
support of "all the one or more other components which are securely operably connected to the 
security component remaining securely operably connected to the security component until 
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completion of the security-sensitive operation ". Therefore, the written description of the 
amended claims does not reasonably convey to one skilled in the relevant art that the inventor(s), 
at the time the application was filed, had possession of the claimed invention. 



Claim Rejections - 35 USC §103 
5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as 
set forth in section 102 of this title, if the differences between the subject matter sought to be 
patented and the prior art are such that the subject matter as a whole would have been obvious at 
the time the invention was made to a person having ordinary skill in the art to which said subject 
matter pertains. Patentability shall not be negatived by the manner in which the invention was 
made. 

5 1 Claims 1, 3-4, 6, 7, 10, 13, 14, 16, 17, 19, 33, 35-36, 38, 39, 42, 45, 46, 48, 49, 51, 56, 
58-59, 61, 62, 65, 68, 69, 71, 72, and 74 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over US Patent 6,125,192 to Bjorn et al. in view of US Patent 5,229,764 to 
Match ett et al.. 

5.2 As per claims 1, 14, 33, 46, 56, and 69, Bjorn et ah substantially teaches a method and 
system for providing continuous authentication of a user of a computing device, comprising: a 
security component which provides security functions,- such that the security component can 
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vouch for authenticity of one or more components with which it is securely operably connected, 
for example (see column 4, line 39 through column 5, line 22; see also column 5, line 43 through 
column 6, line 27); a biometric sensor component that is securely operably connected as one of 
the one or more other components to the security component, for example (see column 4, line 39 
through column 5, line 22; see also column 5, line 43 through column 6, line 27 and column 4, 
line 39 through column 5, line 22); a card containing stored secrets and stored identifying 
information pertaining to an authorized holder of the card, for example (see column 4, line 39 
through column 5, line 22 and column 6, lines 18-27); a card reader for accessing the stored 
secrets and stored identifying information, for example (see column 4, line 39 through column 5, 
line 22); means for operably inserting the card into the card reader, for example (see column 16, 
lines 33-43); and means for establishing a secure operable connection between the biometric 
sensor, the card reader, and the security component, for example (see column 4, line 39 through 
column 5, line 22; see also column 5, line 43 through column 6, line 27 and column 4, line 39 
through column 5, line 22); means for obtaining from the biometric sensor component biometric 
input of a user of the computing device and means for comparing the obtained biometric input to 
the securely-stored biometric information of the authorized holder of the card, for example (see 
column 6, lines 27-43), Bjorn discloses using public-private key system to make the 
communication between sensors and any systems used in processing more secure to prevent 
tampering (column 9, lines 33-35, 41-67). The public-private key system combined with a time 
stamp is a security sensitive operation used by the digital system to make a determination that the 
sensor and the digital system are interconnected as explained in (column 9, lines 64 through 
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column 10, line 22). The only difference between Bjorn and the claimed invention is 
"repeatedly" obtaining a biometric input. 

Matchett et al. in an analogous art teaches means for repeatedly obtaining from the 
biometric sensor component such as fingerprint sensor, retinal scan etc., for example (see column 
1, lines 60 through column 2, line 3) biometric input of a user of the computing device and 
means for comparing the repeatedly obtained biometric input to the securely-stored biometric 
information of the owner, wherein each comparison comprises an authentication of the user, for 
example (see column 3, lines 10-55). Matchett et al. discloses that if biometric checks are 
increased in duration and/or number, security would be enhanced and user substitution to an 
unauthorized user would be prevented, for example (see column 2, lines 55-66). Therefore, it 
would have been obvious to one of ordinary skill in the art at the time the invention was made to 
modify the system of Bjorn et ah to provide teaching means for repeatedly obtaining from the 
biometric sensor component biometric input of a user of the computing device and means for 
comparing the repeatedly obtained biometric input to the securely-stored biometric information 
of the owner, wherein each comparison comprises an authentication of the user as taught by 
Matchett et al.. Bjorn states that if a thief acceses the system once after the session is finished 
the thief cannot utilize the data obtained to access a second session because each time a session 
is established security is re-established meaning the system has to be authenticated again. 
Matchett discloses that the type of system that provides only one initial check u acts as gate to a 
protected system because the user stays in unchecked; a continuous intermittent periodic 
biometric checks would eliminate this problem" (column 2, lines 40-66). There is suggestion or 
motivation to one of ordinary skill in the art to combine the two references because the 
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continuous intermittent periodic biometric checks of Matchett would not allow a thief to tamper 
the system after a first validation because one skilled in the art would have been motivated to 
continuously perform re-authentication to guarantee the interconnection of the devices. There 
should be continuous unpredictable repetition of authentication so long as a protected device is in 
use as suggested by Matchett (column 4, line 47 through column 5, line 7) so as to enhance 
security and prevent user substitution to an unauthorized user, for example (see column 2, lines 
55-66). 

Matchett et al discloses a continuous authentication by controlling any fraudulent 
including signal cut-off of the protected system during the continuous authentication (see an 
exemplary embodiment column 5, line 40 through column 6, line 28). Matchett discloses that in 
addition to a secure connection (column 9, lines 50 et seq.) security could be enhanced 
instructing the protected system or device to shut down should it be disconnected from the 
system 400 (column 10, lines 2-10). Figure 2 shows another secure configuration to protect "one 
or more systems or devices" column 8, lines 8-1 1 that meets the recitation of wherein the means 
for concluding that the security-sensitive operation is authentic also requires that all of the one or 
more components which are securely operably connected to the security core and which are 
involved in the security-sensitive operation remain connected until completion of the security- 
sensitive operation, for example (see column 10, lines 3-5). 

Therefore, it would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine Bjorn and Matchett to make determination that the secure- 
sensitive operation is authentic based on all of the one or more other components which are 
securely operably connected to the security core and which are involved in the security-sensitive 
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operation remain connected until completion of the operation as suggested by Matchett et aL 
This modification would have been obvious because one skilled in the art would have been 
motivated by the suggestions provided by Matchett et ah because keeping everything connected 
to monitor the use of the protected device is part of enhancing the security of a true continuous 
authentication (see column 4, line 55 through column 5, line 6, column 6, lines 10-26). 

As per claims 16, 48, and 71, Bjorn et al discloses the limitation of wherein the stored 
identifying information comprises stored biometric information of the authorized holder, and 
further comprising means for comparing biometric information obtained with the biometric 
sensor from a user of the system, to the stored biometric information of the authorized holder, 
Bjorn et al also discloses wherein the means for comparing is performed by the biometric 
sensor, for example (see column 6, lines 27-43). 

As per claims 3, 35, and 58, Bjorn et al. discloses the limitation of wherein selected 
ones of the secure operable connections are made using one or more buses of the security 
component, for example (see column 4, line 39 through column 5, line 22). 

As per claims 4, 36, and 59, Bjorn et al. discloses the limitation of wherein selected 
ones of the operable connections are made using a wireless connection between respective ones 
of the components and the security component, for example (see column 4, lines 18-22). 
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As per claims 6, 38, and 61, Bjorn et ah discloses the limitation of wherein selected 
ones of the secure operable connections are provided when the security component is 
manufactured, for example (see column 9, lines 52-62). 

As per claims 7, 39, and 62, Bjorn et al. discloses the limitation of wherein the 
components comprise one or more of (1) input/output components and (2) application processing 
components, for example (see column 8, lines 4-30). 

As per claims 10, 42, and 65, Bjorn et al. discloses the limitation of wherein the means 
for establishing a secure operable connection is activated by a hardware reset of the component, 
and wherein the hardware reset is activated by operably connecting of the component, for 
example (see column 8, lines 4-30). 

As per claims 13, 45, and 68, Bjorn et al. discloses the limitation of further comprising 
means for concluding that the user is the authorized holder of the card only if the means for 
comparing succeeds, for example (see column 6, lines 27-43 and column 16, line 50 through 
column 17, line 5). 

As per claims 17, 49, and 72, Bjorn et al. discloses the limitation of further comprising 
means for securely transferring the stored biometric information of the authorized holder to the 
biometric sensor for use by the means for comparing, for example (see column 6, lines 28-43 and 
column 17, lines 50-67). 
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As per claims 19, 51, and 74, Bjorn et al. discloses the limitation of wherein the means 
for comparing is performed by the security component, for example (see column 8, line 60 
through column 9, line 3). 

6 Claims 5, 8, 9, 11, 12, 15, 18, 20, 21, 22, 23, 37, 40, 41, 43, 44, 47, 50, 52, 53, 54, 55, 60, 

63, 64, 66, 67, 70, 73, 75, 76, 77, and 78 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over US Patent 6,125,192 to Bjorn et al. in view of US Patent 5,229,764 to 
Matchett et al. as applied to claims 1, 33, 56, and 69 above, and further in view of US Patent 
6,330,670 to England et ah. 

6. 1 As per claims 5, 22, 37, 54, 60, and 77, Bjorn et al. substantially teaches a method and 
system for securely providing biometric input from a user and means for securely operably 
connecting the biometric sensor the digital system that meets the recitation of the security 
component and the receiving unit that meets the recitation of the card reader. Bjorn et al. 
discloses an embodiment using a network, for example (see figure 3) and also discloses the 
sensor can be connected to a wireless system, or any indirect digital connection, for example (see 
column 4, lines 18-22). Bjorn et al. further discloses mutual authentication using public/private 
key and using a key each time a session is established and a timestamp to prevent stealing of the 
key, for example (see column 10, lines 1-22). It is very well known in the art wireless 
connection using SSL data encryption or equivalent that provides mutual authentication of both 
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endpoints with a limited one-time key. Therefore, it would have been obvious to one of ordinary 
skill in the art at the time the invention was made to modify the system as combined above to 
provide wireless connections use Secure Sockets Layer (SSL) data encryption or an equivalent 
which provides mutual authentication of both endpoints, negotiation of a time-limited key 
agreement with secure passage of a selected encryption key, and periodic renegotiation of the 
time-limited key agreement with a new encryption key as suggested by Bjorn et al. to prevent 
stealing of the key for renegotiation. 

England et al. in an analogous art teaches secure communication between components 
using SSL whereas keys are valid for a short period of time to prevent the key from being 
compromised, for example (see column 15, lines 29-45 and column 20, lines 40-57). England et 
al. also discloses a unique device identifier that is used to identify data originating therefrom, a 
digital certificate, a private cryptographic key and a public cryptographic key that is 
cryptographically-associated with the private cryptographic key, for example (see column 12, 
lines 53-65). Therefore, it would have been obvious to one of ordinary skill in the art at the time 
the invention was made to modify the system of Bjorn et al. to provide wireless connections use 
Secure Sockets Layer (SSL) data encryption or an equivalent which provides mutual 
authentication of both endpoints, negotiation of a time-limited key agreement with secure 
passage of a selected encryption key, and periodic renegotiation of the time-limited key 
agreement with a new encryption key as taught by England et al.. This modification would 
have been obvious because one skilled in the art would have been motivated by the suggestions 
provided by England et al. so as to prevent the key from being compromised. 
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As per claims 8, 9, 11, 12, 21, 40, 41, 43, 44, 53, 63, 64, 66, 67, and 76, Bjorn et ah 

discloses the limitation of wherein the means for establishing a secure operable connection 
further comprises means for authenticating the biometric sensor to the security component and 
means for authenticating the security component to the biometric sensor, for example (see 
column 9, line 30 through column 10, line 7) and security handshake, for example (column 6, 
lines 52-65). Bjorn et al. discloses the limitation of wherein the means for authenticating the 
biometric sensor securely stored thereon. Bjorn et al. is silent about authenticating the card 
reader because of using an integral reader in its preferred embodiment, however, Bjorn et al. 
also discloses using a reader that can be attached to the security component through any 
connection, for example (see column 4, line 65 through column 5, line 6); when using an integral 
component, no duplicative memory, security units would be required otherwise strict security is 
necessary, for example (see column 5, lines 45-65). Therefore, one skilled in the art would be 
able to use disclosed by Bjorn et al. with a separate reader that will require the same 
authentication as the one for the sensor. It is apparent to one skilled in the art that one can 
mutually authenticate the card reader with the security component without departing from the 
scope and the spirit of the invention disclosed by Bjorn et al.. 

England et al. in an analogous art also teaches mutual authentication of more than one 
component, for example (see column 12, lines 53-65) to provide a tamper resistant system. 
Therefore these claims are rejected on the same rationale as the rejection of claims 5, 37, and 60 
above. 

As per claims 15, 18, 47, 50, 70, and 73, Bjorn et al. discloses the limitation of wherein 
the stored secrets comprise a private key and a public key which are cryptographically related 
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using public key cryptography, and further comprising configured to digitally sign information 
presented to the card with the private key if the means for comparing succeeds and if the 
biometric sensor, the card reader, and the security component remain securely operably 
connected, for example (see column 4, line 65 through column 5, line 6 and column 16, lines 32- 
67). The authentication of the card reader was discussed above. Therefore these claims are 
rejected on the same rationale as the rejection of claims 5, 37, and 60. Bjorn et al. discloses a 
cross-authentication that would not be possible if the component is removed from the system (as 
mentioned in column 7, US Patent 6,577,733). 

As per claims 20, 52, and 75, Bjorn et al. discloses the limitation of further comprising 
means for establishing a secure operable connection between an application processing 
component to the security component, and wherein the information presented to the card is 
generated by the established secure, operable connected application processing component, for 
example (see column 9, line 30 through column 10). England et al. also discloses application 
processing component to the security component to generate information from another 
component, for example (see column 12, lines 53-67). Therefore these claims are rejected on the 
same rationale as claims 5, 37, and 60. 

Claims 23, 55, and 78 are similar to the rejected claims 22, 54, and 77 except for 
incorporating the claimed method into a system. Therefore, claims 23, 55, and 78 are rejected 
on the same rationale as the rejection of claims 22, 54, and 77. 
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Conclusion 

7. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1 .136(a). 
A shortened statutory period for reply to this final action is set to expire THREE MONTHS from 
the mailing date of this action. In the event a first reply is filed within TWO MONTHS of the 
mailing date of this final action and the advisory action is not mailed until after the end of the 
THREE-MONTH shortened statutory period, then the shortened statutory period will expire on 
the date the advisory action is mailed, and any extension fee pursuant to 37 CFR 1.136(a) will be 
calculated from the mailing date of the advisory action. In no event, however, will the statutory 
period for reply expire later than SIX MONTHS from the date of this final action. 

7. 1 Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Carl Colin whose telephone number is 571-272-3862. The 
examiner can normally be reached on Monday through Thursday, 8:00-6:30 PM. 

If attempts .to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
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system, see http://pair-direct.uspto.gov . Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Carl Colin 

Patent Examiner X 



October 27, 2005 
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